blob: 33cb01ddae14904a08ce7653d9286584cf0038e5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
#!/sbin/openrc-run
extra_commands="checkconfig"
instance_name=${RC_SVCNAME#*.}
[ "$instance_name" != "openvpn" ] \
&& name="OpenVPN ($instance_name)" \
|| name="OpenVPN"
# Upper case variables are for backward compatibility with Alpine < v3.8.
: ${cfgdir:=${VPNDIR:-"/etc/openvpn"}}
: ${cfgfile:="$cfgdir/$instance_name.conf"}
: ${up_script:="$cfgdir/up.sh"}
: ${down_script:="$cfgdir/down.sh"}
: ${peer_dns:=${PEER_DNS:-"yes"}}
pidfile="/run/$RC_SVCNAME.pid"
command="/usr/sbin/openvpn"
command_args="
--daemon
--config $cfgfile
--writepid $pidfile
--setenv RC_SVCNAME $RC_SVCNAME
--setenv PEER_DNS $peer_dns"
required_dirs="$cfgdir"
required_files="$cfgfile"
# If client_mode is not specified (user has old config), infer it from the
# cfgfile as in old version of this runscript. Eventually we try to fix the
# config when checkconfig() is run.
# This is for backward compatibility with Alpine < v3.8.
if [ -z "$client_mode" ]; then
yesno "${DETECT_CLIENT:-yes}" && grep -q '^\s*remote\s' "$cfgfile" \
&& client_mode=yes \
|| client_mode=no
client_mode_not_set=yes
fi
if yesno "$client_mode"; then
command_args="$command_args
--up-delay
--up-restart
--down-pre
--script-security 2
--up $up_script
--down $down_script"
required_files="$required_files $up_script $down_script"
# If env. variable IN_BACKGROUND is set, fake start and stop commands
# (i.e. don't run them). We do this so we can "start" ourselves from
# inactive (from OpenVPN's up.sh script) which then triggers other
# services to start which depend on us. See openrc-run(8).
in_background_fake="start stop"
start_inactive="yes"
fi
depend() {
need localmount net
use dns
after bootmisc
}
checkconfig() {
if [ ! -e /dev/net/tun ]; then
if ! modprobe tun; then
eerror "TUN/TAP support is not available in this kernel"
return 1
fi
fi
if [ -h /dev/net/tun ] && [ -c /dev/misc/net/tun ]; then
ebegin "Detected broken /dev/net/tun symlink, fixing..."
rm -f /dev/net/tun
ln -s /dev/misc/net/tun /dev/net/tun
eend $?
fi
if yesno "$client_mode"; then
# Warn about setting scripts as we override them
if cfgfile_has_option "(up|down)"; then
ewarn "WARNING: You have defined your own up/down scripts"
ewarn "As you're running as a client, we now force Alpine specific"
ewarn "scripts to be run for up and down events."
ewarn "These scripts will call /etc/openvpn/$RC_SVCNAME-{up,down}.sh"
ewarn "where you can put your own code."
fi
# Warn about the inability to change ip/route/dns information when
# dropping privs
if cfgfile_has_option "user"; then
ewarn "WARNING: You are dropping root privileges!"
ewarn "As such openvpn may not be able to change ip, routing"
ewarn "or DNS configuration."
fi
fi
# This is for backward compatibility with Alpine < v3.8.
if yesno "$client_mode_not_set"; then
ewarn "client_mode is not specified in /etc/conf.d/$RC_SVCNAME, fixing..."
echo "client_mode=$client_mode" >> /etc/conf.d/$RC_SVCNAME 2>/dev/null
eend $?
fi
}
start_pre() {
checkconfig || return 1
# If the config file does not specify the cd option, we do.
# But if we specify it, we override the config option which we do not want.
if cfgfile_has_option "cd"; then
command_args="$command_args --cd $cfgdir"
fi
if ! yesno "$client_mode"; then
# Run as openvpn unless otherwise specified.
cfgfile_has_option "user" || command_args="$command_args --user openvpn"
cfgfile_has_option "group" || command_args="$command_args --group openvpn"
fi
}
cfgfile_has_option() {
grep -Eq '^\s*$1\s' "$cfgfile"
}
|
